Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: ho4MtCgVdwkzHkrwC06u9sEmjhZT3GbUz0AJQfT9xxs=
Subject key identifier: 2F:8E:F8:FE:4A:3F:48:25:08:0B:53:73:AC:BD:84:64:EC:D3:19:D6
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 019D262841CB27CA740329C51BE8701145AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 1759
Signing time: Wed 25 Mar 2026 18:01:05 +0000
Manifest this update: Wed 25 Mar 2026 18:01:05 +0000
Manifest next update: Thu 26 Mar 2026 18:01:05 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: ap5skD4vKza7iTWYQdLh/++HePQb+ClSu7jRzJhjfq0=)
2: jHBsMIq_X95A0zcUUfrUU1TqRyA.roa (hash: di3dTOJ0E+QggdsPKZ6fs3tupenGj8s6a2rjVQo/JqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:41:cb:27:ca:74:03:29:c5:1b:e8:70:11:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Mar 25 18:01:05 2026 GMT
Not After : Mar 26 18:01:05 2026 GMT
Subject: CN=2f8ef8fe4a3f4825080b5373acbd8464ecd319d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:67:da:8c:66:c0:bf:c5:0e:7e:ba:bb:3f:
6d:94:84:9d:80:4c:2d:4f:7b:df:13:b8:d8:a5:94:
b7:01:26:e6:07:de:0d:41:1c:7a:95:38:50:b7:75:
97:c2:cf:22:3e:20:e5:d0:dd:7d:75:17:72:c0:4c:
3d:86:8c:be:44:cb:f0:f9:49:6d:81:b2:5c:12:69:
9a:e0:1a:fc:8b:d7:19:0a:26:7e:f7:c9:8e:35:6e:
84:0a:34:7c:b4:31:49:c6:70:78:72:71:88:e3:a4:
cf:f9:b7:53:77:d6:79:ba:bd:85:7c:f1:ba:af:9c:
a9:11:98:93:87:8d:63:16:49:fa:7c:82:85:92:c0:
b2:5a:16:88:c6:ba:c8:b0:8f:3c:85:aa:3f:5d:b0:
96:f5:98:9e:7e:24:f0:7a:49:59:e5:0a:ef:65:e2:
f9:38:b2:09:0c:01:85:4b:96:2a:63:92:1f:8c:2a:
ce:e3:4d:d2:fb:ea:8f:a5:f4:25:93:b5:6e:dc:88:
28:68:27:7a:18:c2:38:d8:1f:b4:2d:c8:11:c5:9d:
ce:21:c3:f1:37:4b:29:22:35:bb:18:52:19:4d:9d:
40:bd:a2:df:16:0b:a2:1d:00:c9:31:3f:38:33:95:
fb:df:2c:9d:6f:c9:af:40:c7:e0:6f:ad:43:15:a2:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8E:F8:FE:4A:3F:48:25:08:0B:53:73:AC:BD:84:64:EC:D3:19:D6
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1b:39:13:ae:34:8c:b8:9f:60:bc:72:ac:c2:91:d0:1a:de:
eb:bb:c7:1b:f8:ba:59:0e:37:90:e3:52:9a:7d:e8:22:92:58:
9a:8d:ef:df:51:c2:23:0a:90:e1:23:13:27:af:0c:04:15:cf:
45:0d:17:4a:98:e0:8a:9c:12:8a:1a:43:30:41:50:90:cd:11:
fd:aa:78:29:04:21:23:88:41:76:1f:2a:51:21:7e:47:cb:20:
59:8d:4c:36:fb:b7:23:8d:67:9e:a4:0f:c8:52:62:80:8d:98:
8e:a8:e4:dc:65:45:45:f5:2a:b2:0b:54:50:b3:b2:aa:9f:59:
27:0b:99:d3:77:24:f4:11:d8:a6:0b:da:85:81:5f:95:af:8c:
80:0e:82:a6:d1:f8:28:35:c0:3e:92:65:f9:40:51:d8:dc:c7:
c6:73:3a:d3:ac:bd:db:d3:2e:4e:36:b6:d9:a2:23:d5:78:3f:
60:cf:30:45:f1:a0:69:2a:c8:e7:8d:88:6f:d4:66:e7:a8:61:
f4:bc:26:4e:76:65:50:56:37:18:b2:96:fe:21:68:bb:ea:35:
88:d5:93:57:e9:97:31:44:27:34:3a:a1:54:26:e7:3c:e8:b2:
48:a5:62:c2:ba:04:70:cb:22:11:2e:d0:2b:eb:d3:ea:9e:a7:
02:be:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:47 2026 by rpki-client